Nod32 for Linux

[mccracky]

I was looking at Nod32 for Linux which we have bought for some of our linux boxes. It mentioned that the command line options are the same as for the DOS program, but I didn't see the options to scan inside of packed files or archives. Am I missing something or is this missing from the Linux program?

Thanks!

[mccracky]

While I'm asking, is it possible to send just a filename to the nod32 program as an argument rather than a directory? For example:

nod32 /tmp/test/eicar.com

instead of:

nod32 /tmp/test/

Thanks!

[Marcos]

Hello,

some time ago there's been a newer version of NOD32 for Linux put on our website www.nod32.com which supports scanning archives.

Yes, it should be possible to scan only a particular file and not the whole directory.

[mccracky]

-{ Quote: " quoting: Marcos link=board=35;threadid=11140;start=0#msg72844 date=1057928518]
some time ago there's been a newer version of NOD32 for Linux put on our website www.nod32.com which supports scanning archives.
" }-
What version? We have "NOD32 Antivirus System for Linux 1.015 (030505)" and the help doesn't mention anything about archives or packed files.
-{ Quote: " quoting: Marcos link=board=35;threadid=11140;start=0#msg72844 date=1057928518]
Yes, it should be possible to scan only a particular file and not the whole directory.
" }-
How? I send nod32 a file as an argument and it tries to treat it as a directory:
# ./nod32 /home/smccracken/test/eicar.com
? Loading module...OK

? Scanning log
? NOD32 Version 1.455 (20030707)

? Command line: /home/smccracken/test/eicar.com
date: 11.7.2003 time: 12:59:05

? scanning path /home/smccracken/test/eicar.com
number of diagnosed files: 0com/
number of viruses found: 0
termination time: 12:59:05 total time: 0 sec (00:00:00)

[mccracky]

It's coming up on 2 weeks and there is no resolution to this. If NOD32 expects to gain ground in the corporate workl the customer service needs to improve!

[UNICRON]

Hi Stephen, people has been pretty busy around here lately. I'm sure the NOD mods will answer your question soon.

[jan]

Hi cracky,

I apologize for the delay - more info here. (http://www.wilderssecurity.com/showthread.php?t=11588)

I'd like to know for what purpose do you need the NOD32 for LINUX. We have 2 versions now:

- NOD32 for LINUX - an on-demand scanner especially for e.g. File Server, workstation

- new NOD32 for Linux Mail Server - designed to check e-mail for malware

Please specify your needs, so that we could help you better.

Thanks, :)

jan

[mccracky]

-{ Quote: " quoting: jan link=board=35;threadid=11140;start=0#msg76351 date=1059409213]
Please specify your needs, so that we could help you better.
" }-

Thanks. I will look into the two versions, but this is what I was looking for:

We have a proxy server running in our organization, but have many downloads blocked for virus safety. We have a plug-in that will call virus scanning engine for any download. The scanning code wants to send the filename as the argument rather than a directory. I don't see how I can get Nod32 to work here as 1) it doesn't seem to accept a filename as an argument and 2) I don't see documentation on scanning archives in the Linux version of Nod32. We don't want to open up downloading until we get this plugin working.

[jan]

Hi cracky,

I sent you an IM.

Cheers, :)

jan

[Missing Zhen-Xjell]

First, let me apologize for not logging into my Zhen-Xjell account, I can't seem to get the "forgot password" function working to send me email. Paul, I'm going to call you on your cellphone after this post. I sent you email a week or so ago.

Here is my question, I'd like to setup the linux mail server nod32 daemon to scan inbound emails. If one is intercepted and found to contain malware, can this daemon be configured to reply to the sender indicating such to them?

Thanks

Paul

[MickeyTheMan]

Hi Paul,
Paul Wilders is on holidays !

[jan]

Hi Paul,

>Here is my question, I'd like to setup the linux mail server nod32 daemon to scan inbound emails. If one is intercepted and found to contain malware, can this daemon be configured to reply to the sender indicating such to them?

I sent you an IM too.

Best wishes, :)

jan

[Zhen-Xjell]

Jan I got my account back thanks to some ingenius thinking. ;)

Lets PM each other via this account.

Thanks

[netwoR]

Hello,
where can I obtain NOD32 for Linux with archive scanning abilities? There is still the broken version 1.015 (030505) only on http://www.nod32.com/download/download.htm.

Thank you
Dalimil Gala

-{ Quote: " quoting: Marcos link=board=35;threadid=11140;start=0#msg72844 date=1057928518]
Hello,

some time ago there's been a newer version of NOD32 for Linux put on our website www.nod32.com which supports scanning archives.

" }-

[jan]

Hi netwoR,

as I wrote above for another guy -

We have 2 versions now: Please specify your needs, so that we could help you better:


- NOD32 for LINUX - an on-demand scanner especially for e.g. File Server, workstation

- new NOD32 for Linux Mail Server - designed to check e-mail for malware

Thanks,


jan

[netwoR]

As far as I know we have licence for Linux on demand scanner (not the Linux
mail-server version). http://www.nod32.com/download/unix/nod32linux.tgz

Dalimil Gala

[netwoR]

I contacted Eset's support in the Czech Republic. They sent me an upgrade to v1.990. Now it scans archives (I tested only Eicar *.zip files so far) using the -z switch like this:

agneta:/usr/local/nod32# ./nod32 -z ./virus
NOD32 for Linux, Version 1.990, (C) 2001-2002 ESET Software
Signatures version 1.552 (20031107) from 07-11-2003

Command line: -z
Scanning started on 10-11-2003, 13:53:41

./virus/eicar.com - Eicar test file
./virus/eicar_com.zip - Eicar test file
./virus/eicar_com.zip -> eicar.com - Eicar test file
./virus/eicarcom2.zip - Eicar test file
./virus/eicarcom2.zip -> eicar_com.zip - Eicar test file
./virus/eicarcom2.zip -> eicar_com.zip -> eicar.com - Eicar test file
./virus/wicked_scr.scr - Win32/Sobig.F worm
./virus/your_document.pif - Win32/Sobig.F worm

Scanning finished at 13:53:41, total time: 0 sec (0:00:00)
Total files: 8
Infected files: 5
Cleaned files: 0
Active files: 0

[jan]

Great ! Nice to see you have it now. :)

Thanks,

jan

[nod32fan]

-{ Quote: " quoting: netwoR link=board=35;threadid=11140;start=15#msg100522 date=1068555314]
I contacted Eset's support in the Czech Republic. They sent me an upgrade to v1.990. Now it scans archives (I tested only Eicar *.zip files so far) using the -z switch like this:

agneta:/usr/local/nod32# ./nod32 -z ./virus
NOD32 for Linux, Version 1.990, (C) 2001-2002 ESET Software
Signatures version 1.552 (20031107) from 07-11-2003

Command line: -z
Scanning started on 10-11-2003, 13:53:41

./virus/eicar.com - Eicar test file
./virus/eicar_com.zip - Eicar test file
./virus/eicar_com.zip -> eicar.com - Eicar test file
./virus/eicarcom2.zip - Eicar test file
./virus/eicarcom2.zip -> eicar_com.zip - Eicar test file
./virus/eicarcom2.zip -> eicar_com.zip -> eicar.com - Eicar test file
./virus/wicked_scr.scr - Win32/Sobig.F worm
./virus/your_document.pif - Win32/Sobig.F worm

Scanning finished at 13:53:41, total time: 0 sec (0:00:00)
Total files: 8
Infected files: 5
Cleaned files: 0
Active files: 0

" }-

wow, very nice to see that it works 8)
i have the demand-scanner, too. iam looking for this feature since a long time. but on nod32.com and nod32.de only "old" versions for downloading. it would be nice, if you can give me a hint, where to get this version :)

best regards,

andi

[jan]

Hey nod32fan,

>it would be nice, if you can give me a hint, where to get this version

If you want, you can go here (http://www.nod32.com/download/download.htm) and search for NOD32 for Linux Mail Server.

Cheers, :)

jan

[nod32fan]

-{ Quote: " quoting: jan link=board=35;threadid=11140;start=15#msg103754 date=1069683221]
Hey nod32fan,

>it would be nice, if you can give me a hint, where to get this version

If you want, you can go here (http://www.nod32.com/download/download.htm) and search for NOD32 for Linux Mail Server.

Cheers, :)

jan
" }-

oh, i see.
but i don't need it to scan mails. i have to use it for ftp-uploads on my server. and like netwoR i have the licence for the on-demand-scanner only.
what possibilities are there for my situation ??

best regards

ps: sorry for my english ;)

[jan]

Hi,

>but i don't need it to scan mails. i have to use it for ftp-uploads on my server. and like netwoR i have the licence for the on-demand-scanner only.
what possibilities are there for my situation ??

We are preparing such a version that can be available in a couple of weeks.

Thanks, :)

jan

[nod32fan]

-{ Quote: " quoting: jan link=board=35;threadid=11140;start=15#msg103788 date=1069693739]
Hi,

>but i don't need it to scan mails. i have to use it for ftp-uploads on my server. and like netwoR i have the licence for the on-demand-scanner only.
what possibilities are there for my situation ??

We are preparing such a version that can be available in a couple of weeks.

Thanks, :)

jan
" }-

nice to see :)
i hope so, because nod32 is the best scanner for linux-systems i know !
if you need a beta-tester let me know ;)

best regards

[nod32fan]

-{ Quote: " quoting: jan link=board=35;threadid=11140;start=15#msg103788 date=1069693739]
Hi,

>but i don't need it to scan mails. i have to use it for ftp-uploads on my server. and like netwoR i have the licence for the on-demand-scanner only.
what possibilities are there for my situation ??

We are preparing such a version that can be available in a couple of weeks.

Thanks, :)

jan
" }-

there are news ??
or is the development for linux-on-demand-scanner set on hold ??
i have a licence for 2 years, but in this case i have to migrate to clamavis :(

best regards

[shade91]

How about NOD32 for FreeBSD mail server? I use CommuniGate Pro under FreeBSD 4.9-STABLE and would like to run NOD32.